[
https://issues.apache.org/jira/browse/SVN-4863?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
seunghyuk.yu updated SVN-4863:
------------------------------
Description:
Users are unable to delete sub-folder within a folder with full permission.
{color:#242729}Path based Authorization File{color}
{panel:title=Authorization File}
[/]
@group02 = rw
[:glob:project:/**]
@group01 = r
[:glob:project:/subProject1/**]
@group01 = rw
{panel}
All users under group2 are able to create or delete any subfolder/files in
subProject1 while users under group01 are unable to delete any subfolder/files
with the above permission authorized.
For example,
Users under group02 are able to add a folder "subProject1" under folder
"project":
/project/subProject1
Users under group01 are able to add a file "test.txt" under "subProject1":
/project/subProject1/test.txt
Users under group01 are unable to delete any files under "subProject1":
/project/subProject1/test.txt
The error msg is 'Access to @path forbidden'.
In the previous Subversion 1.9, users under both groups were able to create or
delete any subfolder/files in the path-based authentication without ":glob:"
with above permission authorized.
subversion version 1.10
was:
Users are unable to delete sub-folder within a folder with full permission.
{color:#242729}Path based Authorization File{color}
{panel:title=Authorization File}
[/]
@group02 = rw
[:glob:project:/**]
@group01 = r
[:glob:project:/subProject1/**]
@group01 = rw
{panel}
{color:#242729}Using group02, All the user belonging to group are able to
create a subfolder/files in subProject1 followed by commit.{color}
And then using group01, modify a subfolders/files followed by commit *but
unable to delete a subfolder/files and commit*{color:#242729}. {color}
It says 'Access to @path forbidden'.
However group02 are able to delete a subfolder/files.
Subversion 1.9 of path-based authentication without ":glob:" was fine.
{color:#242729}With the above permission{color}
*Using group02,* Adding a folder "subProject1" works
/project/subProject1
*Using group01,* {color:#242729}Adding a file "test.txt" works{color}
/project/subProject1/test.txt
*Using group01,* Deleting a file doesn't works
/project/subProject1/test.txt
subversion version 1.10
> Unable to delete a subfolder within a folder with RW premission
> ---------------------------------------------------------------
>
> Key: SVN-4863
> URL: https://issues.apache.org/jira/browse/SVN-4863
> Project: Subversion
> Issue Type: Bug
> Components: svnauthz
> Affects Versions: 1.10.0
> Environment: subversion V1.10
> Reporter: seunghyuk.yu
> Priority: Blocker
>
> Users are unable to delete sub-folder within a folder with full permission.
> {color:#242729}Path based Authorization File{color}
> {panel:title=Authorization File}
> [/]
> @group02 = rw
> [:glob:project:/**]
> @group01 = r
> [:glob:project:/subProject1/**]
> @group01 = rw
> {panel}
> All users under group2 are able to create or delete any subfolder/files in
> subProject1 while users under group01 are unable to delete any
> subfolder/files with the above permission authorized.
>
> For example,
> Users under group02 are able to add a folder "subProject1" under folder
> "project":
> /project/subProject1
>
> Users under group01 are able to add a file "test.txt" under "subProject1":
> /project/subProject1/test.txt
>
> Users under group01 are unable to delete any files under "subProject1":
> /project/subProject1/test.txt
>
> The error msg is 'Access to @path forbidden'.
>
> In the previous Subversion 1.9, users under both groups were able to create
> or delete any subfolder/files in the path-based authentication without
> ":glob:" with above permission authorized.
> subversion version 1.10
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
